CYBER ATTACK

Numerous high-severity vulnerabilities in Zyxel's 4G LTE/5G NR CPE, DSL/Ethernet CPE, Fiber ONTs, Security Routers, and Wireless Extenders have been.

A serious flaw in ServiceNow's AI Platform has been fixed, exposing businesses to the dangers of unauthenticated remote code execution (RCE) in the.

Claude Code Weaknesses Anthropic's Claude Code has a serious security flaw that shows how threat actors can use repository configuration files to run.

Telnet, which is 27 years old, gives attackers root access. A recently discovered flaw in the GNU telnet daemon (telnetd) A 27-year-old security.

To strengthen defenses against Cross-Site Scripting (XSS) attacks, one of the most persistent threats on the web, Firefox has released a significant.

Natural language-driven penetration testing is now possible with Kali Linux thanks to the Model Context Protocol's (MCP) smooth integration with.

Claude AI Exploited During a month-long campaign beginning in December 2025, a hacker used Anthropic's Claude AI chatbot to find vulnerabilities, create.

0-Day Vulnerability in Cisco SD-WAN Threat actors have been using a serious zero-day vulnerability in Cisco's Catalyst SD-WAN products since 2023 to get.

Since at least 2023, sophisticated threat actors have been actively using a critical zero-day vulnerability in Cisco's Catalyst SD-WAN Controller.

Discover how The "Remote Control" feature in Anthropic's most recent Claude Code update allows developers to control local terminal sessions from web.

A highly sophisticated phishing campaign that poses as the cybersecurity company Avast has recently surfaced This article explores mimics real avast.

Due to the growing availability of highly advanced malicious tools, the mobile threat landscape is undergoing a dramatic shift toward professionalized.

Through a tactic known as OAuth consent abuse, Microsoft Entra ID is increasingly becoming a target for threat actors who are constantly searching for new.

Review of SOC analysts' alerts When an alert proves to be harmless, how much time do you spend reviewing it This article explores investigating single.

CISA Verifies FileZen Vulnerability Exploit Threat actors are actively taking advantage of a serious flaw in FileZen by Soliton Systems K.K., according to.

Vulnerabilities in SolarWinds Serv-U The Serv-U file server software has received an urgent security update to address several serious flaws that could.

Microsoft Expands Support for DLP Data Loss Prevention (DLP) controls for Copilot Purview are being extended to prevent Microsoft 365 Copilot from.

Threat actors have actively exploited a critical vulnerability in Apache ActiveMQ, resulting in the full deployment of the LockBit ransomware throughout.

SURXRAT is a sophisticated Android Remote Access Trojan (RAT) that is marketed via a malware-as-a-service (MaaS) business model This article explores.

On February 24, 2026, SolarWinds released Serv-U version 15.5.4, which fixes four serious flaws that could give hackers root access to compromised systems.

CPSD CryptoPro Secure Disk for BitLocker Vulnerabilities Numerous flaws have been found in the popular encryption program CryptoPro Secure Disk (CPSD) for.

Software developers are being actively targeted by a coordinated attack campaign using malicious repositories that pose as authentic Next.js projects and.

Microsoft Ends Support for Windows Server 2016 and Windows 10 2016 Three Windows releases that were first released in 2016 are approaching end-of-support.

Discover how Updates from Microsoft Windows 11 25H2 and 24H2 For Windows 11 versions 25H2 and 24H2, KB5077241, an optional non-security update, has been.

OAuth-based application attacks are becoming more common, according to Red Canary's Threat Research team This article explores risk oauth attacks. . One.

A serious flaw in Soliton Systems' FileZen software has been added to the U.S This article explores risks filezen secure. . Cybersecurity and.

Threat actors recently gained initial access to an organization's network by taking advantage of a vulnerability (CVE-2023-46604) in an Apache ActiveMQ.

Discover how The landscape of malware-as-a-service (MaaS) keeps pushing the limits of cybercrime. Researchers at Cyberthint have examined a new mobile.

A shadowy network of exploit brokers trafficking stolen U.S. government cyber tools has been the target of a significant crackdown by the US Department of.

On February 24, 2026, the Office of Foreign Assets Control (OFAC) of the U.S This article explores publicly operation zero. . Department of Treasury.